[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Do Debian packages need to build properly with umask 0007?

On Sun, Sep 07, 2003 at 10:00:32AM +0200, Andreas Metzler wrote:
> On Sun, Sep 07, 2003 at 09:50:27AM +1200, Ewen McNeill wrote:
>> As noted, the permissions on the exim manpage from the exim security
>> update (DSA-376-1) are wrong: they are 640 rather than 644.  This breaks
>> mandb amongst other things, which causes the mandb cron.daily job to
>> fail.

>> It appears that the wrong umask was in effect when the package was
>> built.
> [...]
> This leads to the question stated in the subject: Is it an error in
> the package if it does not build correctly with umask 0007?
> If it is an error, is there a straightforward way to fix it, i.e. some
> magic setting in debian/rules? (/I/ did not find anything in the
> make-manual.) If not it boils down to avoid cp (without -a or -p)
> and use install -m<correct mode> instead.

Which is not enough for exim, because make (install) respects the
umask, using
cp blah bar ; chmod a+x bar ; chmod u+s bar
instead of
install -m4755 blah bar

copying the respective find | xargs commands from dh_fixperms looks
like the best bet.
          cu andreas

Reply to: